Website Privacy Statement
Website Privacy Statement
1.1 This statement sets out our commitment to protecting personal data and how we implement that commitment with regards to the collection and use of personal data.
1,2 Our website is designed to comply with the General Data Protection Regulation 2016 and the Data Protection Act 2018 (referred together in this Statement as ‘the GDPR’ for ease of reference).
2 Who is responsible for my information?
2.1 Swan Housing Association Limited (the “Data Controller”), is responsible for the collection, processing, storage and safe keeping of any information you provide on this website and the information you provide will be managed in accordance with relevant legislation (e.g. GDPR).
3 What information do we collect about you?
3.1 As part of delivering services to you, certain personal information we collect and process will enable us to respond to your enquiry/interest in our service. This information is collected using cookies.
4 How will we use the information about you?
4.1 We will use your information to respond to your interest in our services, respond to any enquiries you make and keep you updated with the latest news (marketing) and products/services.
5 Who we may share your information with?
5.1 Information will be used across the organisation to ensure you are receiving all services you have requested; ensure your information is accurate and up to date and to promote other products we offer and/or to keep you updated with the latest news.
5.2 We will not sell your information to any third parties nor will we share your information except where we are required to by law.
6.1 Visiting our Website
6.1.2 We do not make any attempt to find out the identities of those visiting our websites. We will not associate any data gathered from this site with any personally identifying information from any source.
6.1.3 If we do want to collect personally identifiable information through our website, we will tell you. We will make it clear when we collect personal information and will explain what we intend to do with it.
6.2 What are Cookies
6.2.1 Cookies are text files placed on your computer by websites you visit. These are widely used to enable the websites to work properly (e.g. ensuring that the right personal information collected is attached to the individual who submitted it) when collecting information that you have provided to the Data Controller. You may delete and block cookies if you wish from this site, however, please be aware that this could affect the functioning of this website. If you would like further information relating to cookies and what they do and how to delete them, please visit www.aboutcookies.org or www.allaboutcookies.org
6.3.1 Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org. To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
6.3.2 These cookies are used to collect information about how visitors use our websites. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
6.4 Third party cookies
6.4.1 We sometimes embed video content and photos from websites such as YouTube and Flickr. Pages with this embedded content may present cookies from these websites. You should check the relevant third party website for more information about these cookies.
6.5 Accepting cookies
6.5.1 For this site to function properly you will need to accept cookies. Please be aware that if you do not accept cookies, certain personalised features of this website cannot be provided to you.
7 Access to your personal information and correction
7.1 Access to your personal information
7.1.1 You have the right under Article 15 of the GDPR, to request access to the personal information we may hold about you. If we do hold information about you, we will:-
· Give you a description of it;
· Tell you why we are holding it;
· Tell you who it could be disclosed to; and
· Let you have a copy of the information in an intelligible form.
If you would like to know what, if anything, we may hold about you, you may put your request in writing to the address provided below.
7.2 Correction to your personal information
Under the GDPR, you have the right to erasure which is also known as the ‘right to be forgotten’. This enables you to request the deletion or removal of personal data where there is no compelling reason for its continued processing by Swan.
7.3 Restriction on processing
A data subject has the right to require a controller to stop processing his/her personal data. When processing is restricted, we are allowed to store the personal data but not further process it.
7.4 Objection to processing
Individuals have the right to object to processing in certain circumstances. We must stop processing the personal data unless we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or the processing is for the establishment, exercise or defence of legal claims by/against Swan.
7.5 Withdrawal of consent
An individual has the right to withdraw consent at any time.
7.6 Security of your personal data
We will use your personal data in a way which ensures appropriate security of the data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
8 Disclosure of personal information
8.1 In most circumstances we will not disclose your personal information without consent, except where we are required to do so by law.
8.2 However, there will be times when for example we investigate a complaint about a service, we may need to share personal data across Swan and other relevant bodies
8.3 You can obtain further information on:
· Information Sharing & Partnership Agreements we have with other organisations we work with to deliver services
· Circumstances where we could pass personal data without your consent (e.g. prevention or detection of crime.
9 Links to other websites
9.1 This Privacy Statement only applies to this website and does not cover the links within this site to other websites. So if you link to other websites, you should read their Privacy / Cookie Policies.
10 Changes to our Privacy Statement
10.1 This Privacy Statement will be reviewed from time to time to ensure that it continues to meet the needs of Swan and is in line with current legislation.
11 How to contact us
11.1 Please contact us should you have any questions relating to this Website Privacy Statement or if you would like to make a Subject Access Request (SAR) to see what, if any, personal data we may hold on you.
Swan Housing Association Limited
Privacy Notice for Swan residents
How we use your personal information
Identity and contact details of Controller
Swan Housing Association Limited (“Swan”) is a controller of personal information for the purposes of the General Data Protection Regulation (‘GDPR’). Our contact details for data protection purposes are as follows:
Data Protection Officer – Pilgrim House, High Street, Billericay, Essex CM12 9XY
Email – [email protected]
Phone: 0300 3032500
Purpose of this Privacy Notice
This Privacy Notice tells you what to expect when Swan processes personal information. It applies to information about applicants, residents and other service users. It tells you the purposes for which we may process your personal information and the legal basis for the processing (‘processing’ includes us just keeping your personal information).
Why do we collect and store personal information?
Swan needs to collect, process and store personal information about you and other household members (when you provide information about household members we assume that you do so with their full knowledge and consent) in order to operate as a registered provider of housing and deliver efficient and effective services.
Legal basis for processing
We often have two main legal bases for processing personal data. Firstly, where it is necessary for the purposes of the legitimate interests pursued by Swan or by a third party to process your information. We can do that so long as we do not interfere with your fundamental rights or freedoms.
Secondly, because we have your consent (i.e. agreement) to us processing your personal information. Our residents are asked to sign a data protection consent form when they apply to us for housing or later if they did not sign one when they were granted their first tenancy. The consent form sets out the organisations and type of organisations we often have to share personal information about residents with. Under the GDPR, consent is a legal basis for processing personal information. You can withdraw your consent at any time. This is explained further below in the section entitled ‘Your rights under GDPR’.
The other reasons we can rely upon to process your personal information under GDPR is as follows:
- Where we are under a legal obligation or an obligation under a contract to process/disclose the information.
- Where we need to protect the vital interests (i.e. the health and safety) of you or another person.
- Some personal information is treated as more sensitive (for example information about health, sexuality, ethnic background and others – see footnote below for a full list). The legal basis for processing these special categories of personal information is more limited. To lawfully process special categories of personal data, we must identify a lawful basis for the processing and meet a separate condition for the processing. The basis we can use these are:
- With your consent;
- Where we need to protect the vital interests (i.e. the health and safety) of you or another person;
- Where you have already made your personal information public;
- Where we or another person needs to bring or defend legal claims; and/or
- Substantial public interest grounds
To process personal data about criminal convictions or offences, we must have both a lawful basis for the processing and either legal authority or official authority for the processing.
Information we may hold about you and how we use it
The information we hold on our records concerns our relationship with you. For example:
- We hold names & dates of birth, photographic ID and information about your previous housing circumstances to assess housing applications and help prevent tenancy fraud.
- We hold contact details for you so we can communicate with you by your preferred means, and keep you informed about services we offer which may be useful to you.
- We record information about your needs (for example if you have a carer or social worker; if you need adaptations in your home; if you need large print or translated text) to ensure that we take account of any support needs in our dealings with you, and to improve our communications with you.
- We record information to enable us to provide housing management services. For example we record reports of anti-social behaviour; complaints; change in circumstances (for example when your employment status changes etc.) and information about housing options (e.g. if you have a medical need which means you need to move).
- We keep financial records about the amount of money you have paid us; any amount(s) outstanding and action taken to recover money you owe.
- We may hold information about you if you are engaged with any additional guidance and support services. For example in connection with access to training and employment we may hold information about your job history and skills and experience, or if we support you to improve your financial circumstances, we may hold information about your household income and expenditure.
- We may record your telephone calls to our switchboard for training and monitoring purposes to ensure we are delivering a good service. Any call recordings will be held in accordance with our corporate retention policy before being erased.
- We may capture your image on our CCTV systems if you visit a property, office or community facility. Any CCTV recordings will be held in accordance with our corporate retention policy before being erased.
- We record the findings of surveys and other research to help us improve our service to customers. The information you provide will be anonymous unless you agree that we can use your details.
This list is not exhaustive, as we hold records of most contacts we have with you, or about you, and we process this information so we can deliver services to you. Generally the information we hold will have been provided by you (on application or enquiry forms or when we communicate with you), but we may also hold information provided by third parties where this is relevant to your housing circumstances e.g. from social workers and health professionals (such as doctors and occupational therapists).
We will only ask for personal information that is appropriate to enable us to deliver our services. In some cases you can refuse to provide your details if you deem a request to be inappropriate. However, you should note that this may impact our ability to provide some services to you if you refuse to provide information that stops us from doing so.
How we manage your personal information
We process your personal information in accordance with the principles of GDPR.
We will treat your personal information fairly and lawfully and we will ensure that information is:
- Processed for limited purposes;
- Kept up-to-date, accurate, relevant and not excessive;
- Not kept longer than is necessary;
- Kept secure.
Access to personal information is restricted to authorised individuals on a strictly need to know basis.
We are committed to keeping your personal details up to date, and we encourage you to inform us about any changes needed to ensure your details are accurate.
To help us to ensure confidentiality of your personal information we may ask you security questions to confirm your identity when you call us. We will not discuss your personal information with anyone other than you, unless you have given us prior written authorisation to do so.
Periods for which we will store your personal information
We will only hold your records during the period of our relationship with you and for a set period afterwards to allow us to meet our legal obligations including resolving any follow up issues between us.
Sharing your personal information
Normally, only Swan staff will be able to see and process your personal information. However, there may be times when we will share relevant information with third parties for the purposes as outlined, or where we are legally required to do so. When sharing personal information, we will comply with all aspects of the GDPR. Special categories of personal data about health, sexual life, race, religion and criminal activity for example is subject to particularly stringent security and confidentiality measures.
Where necessary or required, we may share information as follows:
- to comply with the law (e.g. the police, Inland Revenue, Council Tax Registration Officer, Social Security Fraud Act) or a court order
- where there is a clear health or safety risk to an individual or members of the public, evidence of fraud against Swan, other irregular behaviour or a matter Swan is investigating
- in connection with court proceedings or statutory action to enforce compliance with tenancy conditions (e.g. applications for possession or for payment of Housing Benefit direct)
- where Swan has entered into a formal protocol with the police or a local authority department
- providing the name, address and contact number of a resident to contractors or other agents providing services on Swan’s behalf
- providing the name of a resident and the date of occupancy to gas, electricity and water companies
- providing information anonymously for bona fide statistical or research purposes, provided it is not possible to identify the individuals to whom the information relates
- information required by the HCA when monitoring Swan’s activities in its capacity as the regulator of housing associations.
- To protect the vital interests of an individual (in a life or death situation)
Your rights under the GDPR
You have a number of rights under the GDPR:
Access to personal information
Under the GDPR, you have a right to ask us what personal information we hold about you, and to request a copy of your information. This is known as a ‘subject access request’ (SAR). SARs need to be made in writing (we have a subject access form you can use for this purpose), and we ask that your written request is accompanied by proof of your identify. We have one calendar month within which to provide you with the information you’ve asked for (although we will try to provide this to you as promptly as possible).
Following your SAR, we will provide you with a copy of the information we hold that relates to you. This will not generally include information that relates to your property such as repair logs or details of contractor visits, as this is not considered personal information.
If you need us to correct any mistakes contained in the information we hold about you, you can let us know by contacting your Housing Officer or alternatively, contact the Business Improvement Team by email to [email protected], by post at Pilgrim House, High Street, Billericay, Essex CM12 9XY or by telephone on 0300 3032500.
Erasure (‘right to be forgotten’)
You have the right to ask us to delete personal information we hold about you. You can do this where:
- the information is no longer necessary in relation to the purpose for which we originally collected/processed it
- where you withdraw consent
- where you object to the processing and there is no overriding legitimate interest for us continuing the processing
- where we unlawfully processed the information
- the personal information has to be erased in order to comply with a legal obligation
We can refuse to erase your personal information where the personal information is processed for the following reasons:
- to exercise the right of freedom of expression and information;
- to comply with a legal obligation or for the performance of a public interest task or exercise of official authority;
- for public health purposes in the public interest;
- archiving purposes in the public interest, scientific research historical research or statistical purposes;
- the exercise or defence of legal claims; or
Restriction on processing
You have the right to require us to stop processing your personal information. When processing is restricted, we are allowed to store the information, but not do anything with it. You can do this where:
- You challenge the accuracy of the information (we must restrict processing until we have verified its accuracy)
- You challenge whether we have a legitimate interest in using the information
- If the processing is a breach of the GDPR or otherwise unlawful
- If we no longer need the personal data but you need the information to establish, exercise or defend a legal claim.
If we have disclosed your personal information to third parties, we must inform them about the restriction on processing, unless it is impossible or involves disproportionate effort to do so.
We must inform you when we decide to remove the restriction giving the reasons why.
Objection to processing
You have the right to object to processing where we say it is in our legitimate business interests. We must stop using the information unless we can show there is a compelling legitimate reason for the processing, which override your interests and rights or the processing is necessary for us or someone else to bring or defend legal claims.
Withdrawal of consent
You have the right to withdraw your consent to us processing your information at any time. If the basis on which we are using your personal information is your consent, then we must stop using the information. We can refuse if we can rely on another reason to process the information such as our legitimate interests.
Right to data portability
The right to data portability allows us to obtain and reuse your personal data across different services. It allows us to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way. The right only applies to personal data you have provided to us where the reason we are relying on to use the information is either your consent or for the performance of a contract. It also only applies when processing is carried out by us using automated means.
Changes to this Privacy Notice
We keep our privacy notice under regular review and will place any updates on our website; you will be notified of any major changes to this policy.
For further information on how to request your personal information and how and why we process your information, you can contact us using the details below.
Data Protection Officer – Pilgrim House, High Street, Billericay, Essex CM12 9XY
Email – [email protected]
Phone: 0300 3032500
The Information Commissioner (ICO) is also a source of further information about your data protection rights. The ICO is an independent official body, and one of their primary functions is to administer the provisions of the GDPR.
You have the right to complain to the ICO if you think we have breached the GDPR. You can contact the ICO at:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
 By this we mean the Regulation as supplemented and amended by the Data Protection Act 2018
 Special categories of personal data is defined within the GDPR and covers racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a person's sex life or sexual orientation